$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba1287aa-91c5-4550-bf04-c7c8d393b8f2.roa File: ba1287aa-91c5-4550-bf04-c7c8d393b8f2.roa (raw, json) Hash identifier: xrdzbBYWaHdSCmh8hhgyInl2dpu2orrVNmM03joQ4QU= Subject key identifier: A8:E7:25:21:C4:62:BC:F3:CC:42:80:8F:39:88:73:82:24:3F:D4:DD Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 70A378BFBF0C475A7B414A16E667A661DB7B739F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba1287aa-91c5-4550-bf04-c7c8d393b8f2.roa Signing time: Tue 22 Apr 2025 00:11:47 +0000 ROA not before: Tue 22 Apr 2025 00:11:47 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fff:4070::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:a3:78:bf:bf:0c:47:5a:7b:41:4a:16:e6:67:a6:61:db:7b:73:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 22 00:11:47 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=42455901ff4cea32d220d88022cfd11055f241132911b23a648e9f22fc796c86, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:11:57:1d:85:b7:ab:22:8d:c0:f8:09:32:3d: 3e:ab:eb:ef:39:dd:76:0b:28:cd:a9:c9:95:d0:01: 33:b5:a9:a5:13:d3:28:c9:90:52:73:3f:79:5d:f8: 8e:d5:e1:77:24:a6:03:d1:22:a0:65:a6:d8:34:11: 89:c0:17:07:49:6e:d1:bb:f0:b0:91:c5:79:91:91: 3b:bd:ef:6c:d9:01:88:e6:15:aa:6b:6f:9a:7a:41: e4:74:41:59:ac:d8:c7:19:a8:4f:b9:03:a2:96:94: 1d:ff:fd:14:50:7c:24:da:12:ec:3c:95:de:86:6f: b1:c0:2d:18:52:77:cc:54:7d:8f:1f:e6:4d:65:f8: 5a:3f:b9:d4:f9:5a:9c:1e:ee:e5:29:63:7a:2c:d9: 4b:b6:90:ac:23:7b:5e:7a:df:2f:7f:b5:ec:cc:2a: 71:9f:b7:48:92:47:5d:cc:d3:e2:e2:d7:10:c7:43: 82:24:1e:94:c4:6f:6d:73:81:95:ae:11:ef:74:6b: ab:81:18:2e:f8:a2:8b:f6:98:92:a8:75:84:c3:ab: ba:59:c0:f0:ee:cb:3f:f9:65:1f:c4:db:63:6b:21: 31:8a:c5:20:ff:db:63:05:4a:d1:8b:35:9f:2a:54: 26:0d:68:75:1c:ba:28:d4:e0:33:de:86:bb:2e:11: 8f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:E7:25:21:C4:62:BC:F3:CC:42:80:8F:39:88:73:82:24:3F:D4:DD X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba1287aa-91c5-4550-bf04-c7c8d393b8f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:4070::/48 Signature Algorithm: sha256WithRSAEncryption 45:a0:14:ca:b3:c4:c0:4b:70:7e:ac:15:32:9d:e4:f2:bc:88: 33:93:2e:12:96:09:e2:dc:d6:35:64:fd:69:43:61:8a:33:2a: 85:eb:f6:98:d7:38:bf:0b:7c:5a:10:de:c4:28:c3:70:c8:66: a0:0b:2e:46:2c:03:f3:9c:00:17:b6:60:c5:73:df:56:af:92: e8:3a:00:c2:87:f7:e3:df:a9:c4:eb:2e:3f:cd:01:fd:c3:c9: ca:c7:68:fd:57:b7:9e:c2:af:d0:1d:a1:96:72:b7:45:ae:1b: 57:bf:b8:c1:da:e9:71:7a:de:0e:fc:09:b1:10:d6:c6:f1:77: a4:3d:36:c8:08:d8:98:7b:50:b1:82:e9:4b:48:7f:d7:0c:6b: 7d:3c:fc:34:92:31:90:74:18:af:86:77:c5:97:23:4d:ca:3d: 36:e8:ed:13:1b:8c:e5:37:9d:1e:4b:7c:7a:1a:62:1b:82:16: b4:2e:6b:ac:4e:53:01:18:f4:c3:19:68:95:e9:e9:9e:f4:ce: e1:c6:98:27:c1:73:57:7f:c1:cb:65:0c:30:a2:c5:f8:02:04: fe:89:d2:e4:cc:75:78:18:17:ee:6f:6f:4d:1f:05:93:e1:86: d6:9c:3a:99:81:25:fd:46:6d:51:d2:2a:5e:77:b5:80:73:b1: 0c:74:c3:76 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUcKN4v78MR1p7QUoW5memYdt7c58wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIyMDAxMTQ3WhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A0MjQ1NTkwMWZmNGNlYTMyZDIyMGQ4ODAyMmNmZDExMDU1 ZjI0MTEzMjkxMWIyM2E2NDhlOWYyMmZjNzk2Yzg2MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCWEVcdhberIo3A+AkyPT6r6+853XYLKM2pyZXQATO1qaUT 0yjJkFJzP3ld+I7V4XckpgPRIqBlptg0EYnAFwdJbtG78LCRxXmRkTu972zZAYjm Faprb5p6QeR0QVms2McZqE+5A6KWlB3//RRQfCTaEuw8ld6Gb7HALRhSd8xUfY8f 5k1l+Fo/udT5Wpwe7uUpY3os2Uu2kKwje1563y9/tezMKnGft0iSR13M0+Li1xDH Q4IkHpTEb21zgZWuEe90a6uBGC74oov2mJKodYTDq7pZwPDuyz/5ZR/E22NrITGK xSD/22MFStGLNZ8qVCYNaHUcuijU4DPehrsuEY93AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUqOclIcRivPPMQoCPOYhzgiQ/1N0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JhMTI4N2FhLTkxYzUtNDU1MC1iZjA0LWM3YzhkMzkzYjhmMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAB//QHAwDQYJKoZIhvcNAQELBQADggEBAEWgFMqzxMBLcH6sFTKd5PK8 iDOTLhKWCeLc1jVk/WlDYYozKoXr9pjXOL8LfFoQ3sQow3DIZqALLkYsA/OcABe2 YMVz31avkug6AMKH9+PfqcTrLj/NAf3DycrHaP1Xt57Cr9AdoZZyt0WuG1e/uMHa 6XF63g78CbEQ1sbxd6Q9NsgI2Jh7ULGC6UtIf9cMa308/DSSMZB0GK+Gd8WXI03K PTbo7RMbjOU3nR5LfHoaYhuCFrQua6xOUwEY9MMZaJXp6Z70zuHGmCfBc1d/wctl DDCixfgCBP6J0uTMdXgYF+5vb00fBZPhhtacOpmBJf1GbVHSKl53tYBzsQx0w3Y= -----END CERTIFICATE-----Generated at Sat Apr 26 16:32:37 2025 by rpki-client